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ABSTRACT OF THE INVENTION 


In a network computing environment, a user-centric system and method for 
controlling access to user-specific information maintained in association with a web- 
services service. When a web-services client desires access to the user-specific 
information, the client sends a request. The request identifies the reasons/intentions for 
accessing the desired information. The request is compared to the user's existing access 
permissions. If there is no existing access permission, the request is compared to the 
user's default preferences. If the default preferences permit the requested access, an 
access rule is created dynamically and the client's request is filled, without interrupting 
the user. If the default preferences do not permit the request to be filled, a consent user 
interface may be invoked. The consent user interface presents one or more consent 
options to a party with authority to grant consent, thereby permitting the user to control 
whether the client's access will be filled. 
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